Red Hat Security AdvisoryRHSA-2014:2021
jasper security update
Released 2014-12-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) jasper-1.900.1-26.el7_0.2, jasper-libs-1.900.1-26.el7_0.2
- Red Hat Enterprise Linux Client Optional (v. 7) jasper-1.900.1-26.el7_0.2, jasper-devel-1.900.1-26.el7_0.2, jasper-utils-1.900.1-26.el7_0.2
- Red Hat Enterprise Linux ComputeNode (v. 7) jasper-1.900.1-26.el7_0.2, jasper-libs-1.900.1-26.el7_0.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) jasper-1.900.1-26.el7_0.2, jasper-devel-1.900.1-26.el7_0.2, jasper-utils-1.900.1-26.el7_0.2
- Red Hat Enterprise Linux Desktop (v. 6) jasper-1.900.1-16.el6_6.2, jasper-libs-1.900.1-16.el6_6.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) jasper-devel-1.900.1-16.el6_6.2, jasper-utils-1.900.1-16.el6_6.2
- Red Hat Enterprise Linux HPC Node (v. 6) jasper-1.900.1-16.el6_6.2, jasper-libs-1.900.1-16.el6_6.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) jasper-1.900.1-16.el6_6.2, jasper-devel-1.900.1-16.el6_6.2, jasper-utils-1.900.1-16.el6_6.2
- Red Hat Enterprise Linux Server (v. 6) jasper-1.900.1-16.el6_6.2, jasper-libs-1.900.1-16.el6_6.2, jasper-libs-1.900.1-16.el6_6.2.ppc
- Red Hat Enterprise Linux Server (v. 7) jasper-1.900.1-26.el7_0.2, jasper-libs-1.900.1-26.el7_0.2, jasper-libs-1.900.1-26.el7_0.2.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) jasper-devel-1.900.1-16.el6_6.2, jasper-devel-1.900.1-16.el6_6.2.ppc, jasper-utils-1.900.1-16.el6_6.2
- Red Hat Enterprise Linux Server Optional (v. 7) jasper-1.900.1-26.el7_0.2, jasper-devel-1.900.1-26.el7_0.2, jasper-devel-1.900.1-26.el7_0.2.ppc +1
- Red Hat Enterprise Linux Workstation (v. 6) jasper-1.900.1-16.el6_6.2, jasper-libs-1.900.1-16.el6_6.2
- Red Hat Enterprise Linux Workstation (v. 7) jasper-1.900.1-26.el7_0.2, jasper-libs-1.900.1-26.el7_0.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) jasper-devel-1.900.1-16.el6_6.2, jasper-utils-1.900.1-16.el6_6.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) jasper-1.900.1-26.el7_0.2, jasper-devel-1.900.1-26.el7_0.2, jasper-utils-1.900.1-26.el7_0.2
Fixes 3 records
Priority MEDIUM 51
Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted JPEG 2000 file.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.18501 · Published 2014-12-24 · Partial fix CWE-119
Priority MEDIUM 50
Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via a crafted jp2 file,…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.18195 · Published 2014-12-08 · Partial fix CWE-189
Priority MEDIUM 46
Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profi…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.14547 · Published 2014-12-24 · Fixed
THREATIST.IORead the docs